Attachment_E_CyberArk_Test_Procedure-_092515.pdf

Attachment E

CyberArk Test Procedure -092515

1. Ensure card reader and PIV card are in place

Place the card reader in a USB port and insert PIV card.

PIV card picture should be facing up with the gold certificate sliding into the reader

You should see card reader activity

If the you are using a VM, The card reader should be connected to the VM

2. Establish VPN to VDC (You must login to Netscaler)

You will need your AIMS userid/password and two factor token.

3. Pre-check certificates

Please bring up Internet Explorer

Select the windows gear in the top right

Pick Internet Options

Pick Content Tab

Select certificates

With the PIV card reader in place and your PIV card inserted, ensure that your certificate shows under the personal tab. (Note the example Robert Wehrle)

The following two items are very critical

1. Ensure that you see a certification path that is similar to the above. If you do not see a path you will need to import the intermediate certificates that have been attached. See

Appendix A and B.

2. Ensure that your Name is at the bottom certificate and that the word (affiliate) is appended. If this is not the case please alert Don Lindsey or Chris Safsten as soon as possible.

4. Access CyberArk link

Please ensure you use Internet Explorer for this test.

Close all Internet Explorer instances by selecting the browser exit at the yop right

Open a IE Browser and point the browser at https://fsaptcpark006/PasswordVault/

Also please use the attached host file entry for fsaptcpark006 if it doesn’t resolve https://fsaptcpark006/PasswordVault/

And you will see

5. Select Certificate

Select the User Certificate Button. It will display a number of certificates found on your PIV card.

Please select the one that has your name on it and then select ok. When the system queries for the associated PIN, please input the correct PIN.

6. Successful Authentication

7. Logout

Appendix A – Viewing Intermediate Certificates

If there is a problem with the certificate chain as shown on Page 3 or you are receiving an http error code 403, permission denied, and then you may be missing intermediate certificates. You can check the intermediate certificates by opening a IE browser.

Open IE and select the wheel gear in the right corner

Select Internet Options

Select content tab and select the button “certificates”

Select “Intermediate Certification Authority” tab

Please locate the following certificates

VeriSign SSP Intermediate CA - G3

U.S. Department of Education Agency CA - G3

Note the picture below shows the certificates sorted by issued to

The certificates that might need to be imported are highlighted in the picture

Appendix B Importing Certificates (If necessary)

If the certificate is zipped please unzip the certificate and place in a directory that you can locate

Open IE and select the wheel gear in the right corner

Select Internet Options

Select content tab and select the button “certificates”

Select “Intermediate Certification Authority” tab

Select Button Import

Next ->

Select browse and point to the certificate that you had unzipped.

Next->

Next->

Finish->

Please return to statement 3 and recheck the certificate path